Senior Cyber Information Security Consultant – Medical Devices & Regulatory Software

About the role

We are seeking a Senior Cyber Information Security Consultant to lead cybersecurity and information‑security activities for medical‑device and regulatory‑software projects. Based on‑site in Ramot Menashe, you will work closely with developers, quality engineers, and regulatory teams to embed security throughout the product lifecycle.

Key responsibilities

• Perform cyber risk assessments and threat‑modeling for medical‑device products and associated software.
• Define security requirements and implement controls across the Secure SDLC.
• Review system architectures, conduct security testing, and support validation & verification activities.
• Ensure compliance with standards such as ISO 13485, IEC 62304, IEC 62443, ISO 14971, GDPR, and HIPAA.
• Develop and maintain security policies, incident‑response procedures, and documentation for regulatory submissions.
• Act as subject‑matter expert for internal teams and clients, providing guidance on secure design and best practices.

Required profile

• Strong background in cybersecurity and information security for medical devices or healthcare software.
• Hands‑on experience with risk assessment, threat modeling, and security controls implementation.
• Familiarity with relevant regulatory frameworks and standards (ISO 13485, IEC 62304, IEC 62443, ISO 14971, GDPR, HIPAA).
• Proven ability to work in cross‑functional teams and translate complex requirements into practical solutions.
• Excellent written and verbal communication skills in English.

Required skills

• Cybersecurity
• Risk assessment
• Threat modeling
• Security controls implementation
• Secure software development
• Secure architecture review
• Validation & Verification
• Security testing
• ISO 13485
• IEC 62304
• IEC 62443
• ISO 14971
• GDPR
• HIPAA